Skip to content
OpenAdvisories

Package · Go

github.com/ginuerzh/gost

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    ginuerzh/gost vulnerable to Timing Attack

    gost (GO Simple Tunnel) is a simple tunnel written in golang. Sensitive secrets such as passwords, token and API keys should be compared only using a constant-time comparison function. Untrusted input, sourced from a HTTP header, is compared directly with a s…